potiuk opened a new pull request, #438: URL: https://github.com/apache/airflow-steward/pull/438
## Summary Phase 2 of the Magpie restructure. Renames the **per-repo, gitignored framework dotfiles** to the Magpie name: | Before | After | Role | |---|---|---| | `.apache-steward/` | `.apache-magpie/` | gitignored snapshot | | `.apache-steward.lock` | `.apache-magpie.lock` | committed pin | | `.apache-steward.local.lock` | `.apache-magpie.local.lock` | per-machine record | | `.apache-steward-overrides/` | `.apache-magpie-overrides/` | committed overrides | …plus the `.apache-steward.session-state.json` / `.bak` runtime files. Applied across docs, skill logic, eval fixtures, and the code constants that default to these paths (`privacy-llm/checker` `DEFAULT_CONFIG_DIRS`, `generate-cve-json` override relpath). The **leading-dot anchor** means this never touches the repo slug `apache/airflow-steward`, the `setup-steward`/`list-steward-skills` skills, the package name (`pyproject name = "apache-steward"`), or the nested release-name (`.apache-magpie/apache-steward-<VERSION>`). ## Scope note — `~/.config/apache-steward/` deferred The per-user XDG dir `~/.config/apache-steward/` is **deliberately not renamed here.** It is sandbox-allowlisted via `.claude/settings.json` (a file the agent harness protects from modification) and holds persistent credentials, so renaming the default without the allowlist update would break sandboxed credential reads. Its rename + the actual on-disk dir move belong to the **migration phase** (the `/setup-steward upgrade` rewrite, a later PR) — which is exactly the "folders moved during the upgrade" intent. The `sandbox-lint` triad (`settings.json` / `expected.json` / `__init__.py`) is left consistent on `apache-steward`, so `sandbox-lint` stays green. ## Stacking Branched on top of **#437** (skill relocation) because the two touch overlapping files. The diff shown will include #437's commit until that merges; this PR should land after #437. ## Type of change - [x] Cross-cutting (RFC, AGENTS.md, sandbox, privacy-LLM) — framework layout - [x] Documentation - [x] Python package (`tools/*`) — path-default constants only ## Test plan - [x] `prek` full suite on the commit — doctoc, markdownlint, typos, check-placeholders, ruff, ruff-format, mypy, **pytest (workspace)**, skill-and-tool-validate all **Passed** - [x] `uv run --project tools/privacy-llm/checker pytest` and `… generate-cve-json pytest` → green with the renamed default paths - [x] Zero residual `.apache-steward` tokens; XDG `~/.config/apache-steward` intentionally unchanged and consistent across the sandbox-lint triad 🤖 Prepared with AI assistance (Claude Code, Opus 4.8); reviewed by the human author before submission. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
